root/pypi: links for cyclonedx